Lucene search
+L

2 matches found

OSV
OSV
•added 2025/04/14 12:15 p.m.•16 views

CVE-2024-49708

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS Cross-site Scripting attacks. An attacker might trick a user into filling a form designed for setting delivery address with a malicious script, what causes the script to run in user's context. This vulnerability...

5.4CVSS5.7AI score0.00241EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/14 12:00 a.m.•7 views

CVE-2024-49708: Improper Neutralization of Input During Web Page Generation

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS Cross-site Scripting attacks. An attacker might trick a user into filling a form designed for setting delivery address with a malicious script, what causes the script to run in user's context. This vulnerability...

5.4CVSS5.7AI score0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder